Privacy policy

This is a translation. The Polish Polityka prywatności is the binding version.

1. Who controls your data

The controller is Piotr Grudziński, trading as WGNIOT⁠-⁠FIX Piotr Grudziński, Aleja Poznańska 82, 64-920 Piła, Poland, NIP (tax ID) 7631618405, REGON 302287798. Contact: wgniotfix@gmail.com, tel. +48 788 924 925, or by post to the workshop.

2. What data I collect

• From the request form: your name, phone number and email address and, if you add them, the make and model of the car, a description, the type of damage, the marked panels and photos. A number plate may be visible on photos. You don’t have to show it.
• Technical data: your IP address and the time of sending. The IP address reaches me with the request so I can deal with abuse. A one-way hash of the IP address is used for one hour to limit requests from one device and is deleted after two hours at the latest.
• From phone calls and emails: whatever you tell me.

3. Purposes and legal bases

• Replying to your request, assessing whether a repair is possible, arranging an inspection, preparing an offer and sending you a confirmation email: Art. 6(1)(b) GDPR (steps taken at your request before a contract).
• Carrying out the repair, invoicing and handling complaints: Art. 6(1)(b) GDPR (contract) and Art. 6(1)(c) GDPR (tax and accounting obligations).
• Protecting the form against spam and abuse and establishing, exercising or defending legal claims: Art. 6(1)(f) GDPR (my legitimate interest).

Providing data is voluntary, but without a phone number and email address I can’t reply to your request or send a confirmation.

4. Who receives your data

Form data is emailed to my mailbox. Only companies that provide technical services to me can access it: the web and mail hosting provider (OVH Sp. z o.o., Wrocław, Poland) and the mailbox provider (Google, Gmail), and an accounting office if needed. I don’t sell data or share it for marketing.

Google may also process data outside the European Economic Area, including in the USA, based on the European Commission’s adequacy decision (EU-U.S. Data Privacy Framework) or standard contractual clauses.

5. How long I keep data

• Requests that don’t lead to a repair: up to 12 months after our last contact.
• Data about a completed repair: until complaint and limitation periods expire; accounting records for as long as tax law requires (usually 5 years from the end of the tax year).
• The IP hash used to limit requests: 2 hours at the latest.

6. Your rights

You have the right to access, rectify and erase your data, to restrict processing and to data portability, and to object to processing based on my legitimate interest. Contact me using the details above. You can also lodge a complaint with the Polish supervisory authority, Prezes Urzędu Ochrony Danych Osobowych (ul. Stawki 2, 00-193 Warszawa).

I don’t make automated decisions about you or profile you.

7. Cookies and similar technologies

This site uses no cookies, no analytics and no advertising tools, and it doesn’t store anything on your device. The font and the 3D models load from the same server, with no third-party services.

The hosting server may keep standard logs (IP address, date and time, page requested) for security and diagnostics.

The site links to Google Maps, my Google profile, Facebook, Instagram and TikTok. Once you follow a link, those services’ own privacy rules apply.

8. Changes

If the way I process data changes, I’ll update this policy and the date below.